This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json) Hash identifier: gQIsLXjC4u/y2w7gv3QL3RadLNWlv/Oi4+LaJvNMI1A= Subject key identifier: A0:5F:2E:47:FB:A4:66:D1:DE:B0:8E:88:EC:78:36:F0:BD:03:B6:AC Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3 Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3 Certificate serial: 019AF3F7A89750A5FDE5E98B160059E0DA79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft Manifest number: 0CCF Signing time: Sat 06 Dec 2025 14:01:25 +0000 Manifest this update: Sat 06 Dec 2025 14:01:25 +0000 Manifest next update: Sun 07 Dec 2025 14:01:25 +0000 Files and hashes: 1: 18pU9OUJZfEjtQtM3d6KCEE-wf4.roa (hash: g9Yx6RdVIwFFC/gP3XLwi8dipV0AyWlMkba67EAqwI4=) 2: f2nWyu3vigJSlBOetOrjZwH1G1A.roa (hash: UMryrqtW8NDhWGWT0rJw80JqEFYALJXz4j6oSIXBhd4=) 3: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: dMam7oPArVrXP65bPUdoyTDF7f2KM4rV+2FTudDAJK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:a8:97:50:a5:fd:e5:e9:8b:16:00:59:e0:da:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3 Validity Not Before: Dec 6 14:01:25 2025 GMT Not After : Dec 7 14:01:25 2025 GMT Subject: CN=a05f2e47fba466d1deb08e88ec7836f0bd03b6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:24:5f:bb:f7:ab:a9:ab:0c:6a:29:0a:16: a3:34:cc:14:1e:ad:0e:07:a4:55:b7:b9:ad:fc:f3: a3:fa:5a:10:b1:fe:e6:94:1d:fa:4d:53:0b:de:de: 4a:93:84:1a:5f:39:6d:56:76:65:fe:26:b7:bd:10: 0c:4a:05:25:87:15:2b:8a:3e:ff:9b:bb:d8:a5:72: 7f:c8:08:d9:39:22:2f:a4:9d:13:b2:d3:58:ec:42: fd:68:5f:9b:12:02:46:72:95:33:47:17:85:f0:42: 4c:71:4b:c2:a7:00:59:40:05:45:9b:3b:cb:d8:88: d5:67:71:50:d2:a8:57:f9:55:3d:e8:89:0e:44:d5: 6f:aa:b4:d1:ab:45:00:d5:80:4a:02:ba:11:bb:16: f1:e1:86:cc:bd:f7:4b:0b:5c:79:7f:6f:bd:ff:65: 27:ba:c0:a0:de:27:d9:46:70:24:b8:04:29:0b:85: cc:cb:2c:69:4e:40:e7:0c:9b:37:18:be:e9:59:c9: 6d:92:02:0d:9e:fe:73:47:dd:5e:f9:c6:76:d5:c3: 30:d2:af:9d:47:c6:b4:5b:4b:6c:8f:b6:5f:42:f1: 61:87:dc:d4:0a:a3:01:a7:d1:56:90:62:1f:f1:e2: 8d:3c:ca:1b:bf:f4:2e:94:fe:a4:ee:96:4c:c3:82: 87:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5F:2E:47:FB:A4:66:D1:DE:B0:8E:88:EC:78:36:F0:BD:03:B6:AC X509v3 Authority Key Identifier: keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:bf:4a:b4:6a:c7:ea:8f:c5:97:e4:89:91:29:11:e5:80:c9: 87:99:f7:73:e2:ee:29:af:89:b4:38:5f:9c:72:2f:69:72:86: 72:a8:ac:4f:ea:80:56:2f:85:ef:d8:ed:35:8a:ac:55:f6:19: 52:f1:a6:0f:25:40:f2:22:ba:a5:83:9d:28:d9:0c:a6:b5:c4: 68:1b:22:c2:9d:b6:d0:15:03:11:0d:05:5f:66:6f:14:0c:14: 59:36:b8:b9:0c:a3:ff:29:15:d0:dd:c8:18:10:ca:86:c7:d9: 3f:c2:e8:96:4b:06:59:27:e3:24:b1:d0:b8:96:c9:b4:c2:98: 76:5f:3b:4b:3e:27:43:c7:63:19:a8:4f:d3:f2:35:f6:0a:9d: 9e:8b:53:b5:54:59:8e:4d:09:ab:17:c0:2f:d8:13:69:3f:4a: 8a:cd:31:a7:d1:7c:7b:95:6d:dc:08:b7:b2:0d:33:bc:45:30: 15:77:f4:50:84:c7:bc:cb:9b:c6:85:2e:2b:5e:fe:aa:da:75: 77:93:ff:75:c2:ea:29:ba:31:42:40:39:f0:0c:47:b5:1b:da: fa:b2:96:09:c0:4f:e5:dd:94:27:ca:72:07:ea:62:b1:80:3a: ed:63:4a:b7:c6:8b:36:44:90:d8:63:2c:c4:c6:5f:8e:6b:53: 1e:44:e8:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz96iXUKX95emLFgBZ4Np5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOGQ4NTk4MDY0ZGI1YThlZGIzYTYwODQwNjRjZDJhMWFk OGM2ZTMwHhcNMjUxMjA2MTQwMTI1WhcNMjUxMjA3MTQwMTI1WjAzMTEwLwYDVQQD EyhhMDVmMmU0N2ZiYTQ2NmQxZGViMDhlODhlYzc4MzZmMGJkMDNiNmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjckX7v3q6mrDGopChajNMwUHq0O B6RVt7mt/POj+loQsf7mlB36TVML3t5Kk4QaXzltVnZl/ia3vRAMSgUlhxUrij7/ m7vYpXJ/yAjZOSIvpJ0TstNY7EL9aF+bEgJGcpUzRxeF8EJMcUvCpwBZQAVFmzvL 2IjVZ3FQ0qhX+VU96IkORNVvqrTRq0UA1YBKAroRuxbx4YbMvfdLC1x5f2+9/2Un usCg3ifZRnAkuAQpC4XMyyxpTkDnDJs3GL7pWcltkgINnv5zR91e+cZ21cMw0q+d R8a0W0tsj7ZfQvFhh9zUCqMBp9FWkGIf8eKNPMobv/QulP6k7pZMw4KHXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBfLkf7pGbR3rCOiOx4NvC9A7asMB8GA1UdIwQY MBaAFIuNhZgGTbWo7bOmCEBkzSoa2MbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MjNlOWMtNDQyNS00OTZlLWIyMzct NmIwZWY5MTA4Njg4LzEvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MjNlOWMtNDQyNS00OTZlLWIyMzctNmIwZWY5MTA4Njg4 LzEvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfL9KtGrH 6o/Fl+SJkSkR5YDJh5n3c+LuKa+JtDhfnHIvaXKGcqisT+qAVi+F79jtNYqsVfYZ UvGmDyVA8iK6pYOdKNkMprXEaBsiwp220BUDEQ0FX2ZvFAwUWTa4uQyj/ykV0N3I GBDKhsfZP8LolksGWSfjJLHQuJbJtMKYdl87Sz4nQ8djGahP0/I19gqdnotTtVRZ jk0JqxfAL9gTaT9Kis0xp9F8e5Vt3Ai3sg0zvEUwFXf0UITHvMubxoUuK17+qtp1 d5P/dcLqKboxQkA58AxHtRva+rKWCcBP5d2UJ8pyB+pisYA67WNKt8aLNkSQ2GMs xMZfjmtTHkToaA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:47:20 2025 by rpki-client